This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/C09D7446D60F11F0929B8FF3DAE4EC9C.roa
File:                     C09D7446D60F11F0929B8FF3DAE4EC9C.roa (raw, json)
Hash identifier:          jxUAEr+gL2A5pYodyrShkYHLF8BEr2fg48HKO/LfZok=
Subject key identifier:   9D:65:05:39:26:FB:EC:BC:42:8A:8A:28:62:C5:69:94:DA:2D:09:D6
Certificate issuer:       /CN=F367CC68AF/serialNumber=905025724B63CA49659EC14058FAB0C131C50E9F
Certificate serial:       10
Authority key identifier: 90:50:25:72:4B:63:CA:49:65:9E:C1:40:58:FA:B0:C1:31:C5:0E:9F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kFAlcktjykllnsFAWPqwwTHFDp8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/C09D7446D60F11F0929B8FF3DAE4EC9C.roa
Signing time:             Wed 10 Dec 2025 21:32:40 +0000
ROA not before:           Wed 10 Dec 2025 21:32:34 +0000
ROA not after:            Sun 31 Dec 2045 21:32:34 +0000
asID:                     37069
IP address blocks:        197.150.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kFAlcktjykllnsFAWPqwwTHFDp8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 14 Dec 2025 00:06:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367CC68AF, serialNumber=905025724B63CA49659EC14058FAB0C131C50E9F
        Validity
            Not Before: Dec 10 21:32:34 2025 GMT
            Not After : Dec 31 21:32:34 2045 GMT
        Subject: CN=6939e6f7-7c1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2f:89:84:66:3e:fa:b8:8a:d8:06:74:fd:37:
                    55:a9:43:f6:d2:6d:96:7a:51:a0:71:b2:08:49:c9:
                    fa:86:f6:bb:36:c0:27:3e:e1:11:64:29:53:30:dc:
                    01:1a:dd:23:e9:c8:bf:12:6b:d2:de:7a:3b:d8:a8:
                    c2:7d:13:3e:cb:41:14:fe:b4:fc:91:15:51:db:d8:
                    b0:fd:dd:fb:b5:71:53:ca:28:bb:58:3d:b9:4a:bc:
                    65:7f:28:fc:cb:d9:81:00:e2:47:60:b1:ec:f0:84:
                    52:74:14:a6:b3:72:98:72:29:c8:d4:63:c8:cb:c0:
                    6d:c2:46:f4:84:e5:f7:b6:cc:00:8e:03:6d:4e:b6:
                    47:ca:7a:c4:6b:f3:af:55:14:76:fe:e5:62:9c:f7:
                    97:0e:18:ba:eb:ce:04:a0:5a:04:70:93:70:a8:54:
                    86:0b:15:25:bc:64:72:72:02:c6:40:ab:fa:d0:6f:
                    b5:e8:25:7f:97:4a:c6:05:f0:2d:bb:22:ba:61:3b:
                    8d:16:1b:54:15:6f:c0:9e:0e:71:e4:6c:b8:a1:3c:
                    20:69:35:c7:f6:cd:1e:85:b0:26:c9:d2:df:75:bd:
                    f4:d5:db:f0:3d:7b:05:bb:16:da:7e:02:ef:2f:0e:
                    f0:32:bb:bd:ba:8f:41:b8:2a:4a:ed:82:2c:e1:e2:
                    95:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:65:05:39:26:FB:EC:BC:42:8A:8A:28:62:C5:69:94:DA:2D:09:D6
            X509v3 Authority Key Identifier:
                keyid:90:50:25:72:4B:63:CA:49:65:9E:C1:40:58:FA:B0:C1:31:C5:0E:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kFAlcktjykllnsFAWPqwwTHFDp8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/C09D7446D60F11F0929B8FF3DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  197.150.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         9c:25:eb:6d:00:02:2d:ad:6f:25:c0:ec:b5:9b:5c:c7:04:ce:
         c5:83:f8:ee:e4:7f:e0:5d:c0:65:ad:d0:4e:c9:6e:86:0a:f9:
         ea:da:29:dd:5a:d5:a8:20:3a:b5:d3:1c:ff:70:bb:12:51:4e:
         8b:ae:26:a0:e3:1d:25:25:37:15:fb:39:ed:fa:bc:c5:ff:e6:
         46:30:64:3a:16:ca:0c:e5:5a:c4:22:78:e6:22:ba:3f:78:91:
         53:0c:20:a8:cb:6c:d2:a0:ca:6d:3e:f9:82:c8:d0:28:3c:58:
         e8:cc:9e:c5:1c:36:af:08:fc:4a:5b:6c:db:3d:c6:5f:bf:01:
         19:56:4f:45:f5:2e:15:cc:d6:d4:81:5f:66:f5:a5:b7:ee:74:
         bc:bb:d1:2b:c4:8f:7c:de:e7:3c:6c:f8:e1:d9:b7:12:6f:94:
         55:bc:e5:67:7a:4e:91:87:79:5b:7d:ac:cd:79:2a:58:ef:82:
         92:2e:8f:38:d3:09:aa:18:a9:39:ef:c4:7b:c9:ea:27:1e:c6:
         56:63:54:df:80:71:b1:8e:8b:2a:74:dc:01:b8:15:d0:0b:53:
         50:8b:60:b0:fe:65:c0:78:f3:7f:c0:62:5a:cc:51:c0:b4:7b:
         b1:1d:c8:68:76:de:53:46:2e:a3:5a:e1:22:5e:e8:b9:b7:f5:
         22:10:58:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 10:27:44 2025 by rpki-client